$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/mQ-LHYl-kJsHu4Pf-iaLQYWegH8.roa File: mQ-LHYl-kJsHu4Pf-iaLQYWegH8.roa (raw, json) Hash identifier: WjWU5YW8fZlga4d7cWioeG6i0jBRGkoISCJ6fBAu1SU= Subject key identifier: 99:0F:8B:1D:89:7E:90:9B:07:BB:83:DF:FA:26:8B:41:85:9E:80:7F Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 149A Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/mQ-LHYl-kJsHu4Pf-iaLQYWegH8.roa Signing time: Fri 22 Aug 2025 09:00:36 +0000 ROA not before: Fri 22 Aug 2025 09:00:36 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 7482 IP address blocks: 223.22.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 17:44:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5274 (0x149a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Aug 22 09:00:36 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=990F8B1D897E909B07BB83DFFA268B41859E807F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:21:24:2f:8b:23:62:f9:84:d0:ae:88:ec:41: 77:63:3f:be:cb:f3:12:41:26:72:5d:b8:c2:a5:3d: 53:33:10:82:ba:3e:fd:7a:84:31:4e:c6:62:dc:56: 51:c9:1f:56:24:6e:01:fe:3c:68:d6:0d:b8:41:f2: 64:41:f0:33:35:05:df:ac:26:bd:f7:ba:08:43:43: fb:40:67:58:59:3c:41:18:dc:d2:73:2f:75:c2:66: f4:d9:2f:ba:1d:99:fc:1f:13:a1:55:4a:81:2a:87: 6c:80:5d:72:d6:a4:73:54:3e:f7:b8:6e:6a:18:1a: b1:24:4f:1c:b4:b8:39:fa:15:07:aa:23:b7:6b:07: 29:e9:b7:af:d2:4b:ad:80:68:76:7a:63:52:d6:31: e0:ce:ad:10:20:0d:55:62:1c:49:db:1f:74:09:84: e5:28:c7:81:f3:58:8c:ab:cd:9f:1e:80:73:37:dc: f4:75:81:09:75:26:a6:bc:73:b7:aa:28:9b:12:15: fb:74:39:6f:0d:0a:5f:37:29:83:2a:55:62:a8:b9: 40:d5:5c:38:a0:21:a6:b4:4f:2a:5b:82:74:98:0d: 46:ca:f1:2d:90:72:79:27:a7:a3:f6:80:d3:67:71: 22:28:9f:19:ab:ba:c6:a9:84:b0:32:e6:e5:23:6c: 66:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:0F:8B:1D:89:7E:90:9B:07:BB:83:DF:FA:26:8B:41:85:9E:80:7F X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/mQ-LHYl-kJsHu4Pf-iaLQYWegH8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 223.22.66.0/24 Signature Algorithm: sha256WithRSAEncryption b5:54:f7:b1:56:f9:71:a5:67:dd:ef:c3:d1:9a:18:f2:ab:da: b9:cd:f0:bc:fc:59:65:f5:d6:1e:25:ca:22:45:c2:b6:77:98: e5:20:05:61:7c:9d:18:eb:35:fc:b8:12:e7:31:ad:af:ee:e9: ce:a3:f7:4d:12:8a:bd:26:22:24:a7:50:83:8b:a8:22:53:eb: 1c:5b:04:39:a6:17:7d:9d:ab:56:07:aa:c1:c3:66:52:56:13: 3b:10:5e:61:1e:df:59:b9:88:02:7b:a7:84:8c:2c:7b:fd:25: 8d:ea:85:38:a8:30:32:62:94:b3:aa:eb:2e:77:f4:43:4e:2b: 3d:60:9d:0d:0b:ca:d1:0d:29:51:8b:ab:c7:66:30:9a:3e:79: ed:37:9b:09:02:0c:5a:be:6c:4d:b2:4b:f7:3a:5b:37:74:e0: 22:0a:8c:1c:82:19:f9:a8:45:e8:8c:cb:d1:07:cc:c4:14:4e: 51:92:2e:d2:06:1f:b0:f8:27:4f:2f:85:8b:5c:95:6f:8a:06: 12:dc:c7:13:45:48:69:01:e8:d9:59:8f:fb:ce:a2:f3:6a:63: 25:a9:d9:62:ac:3d:47:f1:a9:94:b9:13:39:f6:66:54:b1:d2: de:4c:3f:90:66:d5:dd:ee:b2:5c:09:9d:31:cd:fe:5d:95:9e: 61:4b:dc:98 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICFJowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNTA4MjIw OTAwMzZaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDk5MEY4QjFEODk3RTkw OUIwN0JCODNERkZBMjY4QjQxODU5RTgwN0YwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDQISQviyNi+YTQrojsQXdjP77L8xJBJnJduMKlPVMzEIK6Pv16 hDFOxmLcVlHJH1YkbgH+PGjWDbhB8mRB8DM1Bd+sJr33ughDQ/tAZ1hZPEEY3NJz L3XCZvTZL7odmfwfE6FVSoEqh2yAXXLWpHNUPve4bmoYGrEkTxy0uDn6FQeqI7dr Bynpt6/SS62AaHZ6Y1LWMeDOrRAgDVViHEnbH3QJhOUox4HzWIyrzZ8egHM33PR1 gQl1Jqa8c7eqKJsSFft0OW8NCl83KYMqVWKouUDVXDigIaa0TypbgnSYDUbK8S2Q cnknp6P2gNNncSIonxmrusaphLAy5uUjbGahAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUmQ+LHYl+kJsHu4Pf+iaLQYWegH8wHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL21RLUxIWWwta0pzSHU0UGYtaWFMUVlX ZWdIOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADfFkIwDQYJ KoZIhvcNAQELBQADggEBALVU97FW+XGlZ93vw9GaGPKr2rnN8Lz8WWX11h4lyiJF wrZ3mOUgBWF8nRjrNfy4Eucxra/u6c6j900Sir0mIiSnUIOLqCJT6xxbBDmmF32d q1YHqsHDZlJWEzsQXmEe31m5iAJ7p4SMLHv9JY3qhTioMDJilLOq6y539ENOKz1g nQ0LytENKVGLq8dmMJo+ee03mwkCDFq+bE2yS/c6Wzd04CIKjByCGfmoReiMy9EH zMQUTlGSLtIGH7D4J08vhYtclW+KBhLcxxNFSGkB6NlZj/vOovNqYyWp2WKsPUfx qZS5Ezn2ZlSx0t5MP5Bm1d3uslwJnTHN/l2VnmFL3Jg= -----END CERTIFICATE-----Generated at Sun Aug 24 14:20:12 2025 by rpki-client